5.0★ / 64 reputation. Site's holding you back.
A 8.5 s mobile load and a few gaps are leaving easy wins on the table.
goodguyroofing.com has genuine authority — 5.0★ / 64 on Google (64 reviews, verified). Overall audit health is 67/100 (grade D). The drag isn't reputation, it's the site: no H1, no LocalBusiness schema, missing security headers, plus a 8.5 s mobile load.
Domain: goodguyroofing.com · Business: Roofing contractor · Broward / Miami-Dade / Palm Beach, FL · Service area: Pompano Beach / Broward, FL (954)
Read this if nothing else.
Real reputation (5.0★ / 64), held back mostly by site speed and missing security/schema. Most fixes are quick.
HTTPS enabled with a valid certificate
Verified strength — keep it.
Strong SEO fundamentals (85/100 Lighthouse)
Verified strength — keep it.
Add a Strict-Transport-Security (HSTS) header
Flagged in the live security/SEO scan.
Add a Content-Security-Policy with script-src restrictions
Flagged in the live security/SEO scan.
Fix these first.
| # | Action | Why it matters | Effort |
|---|---|---|---|
| 1 | Add a Strict-Transport-Security (HSTS) header | Flagged by the live scan as a top fix. | 15 min–2 hr |
| 2 | Add a Content-Security-Policy with script-src restrictions | Flagged by the live scan as a top fix. | 15 min–2 hr |
| 3 | Add a single descriptive H1 to the homepage | Flagged by the live scan as a top fix. | 15 min–2 hr |
| 4 | Add LocalBusiness schema (sameAs + aggregateRating linking your reviews) | Flagged by the live scan as a top fix. | 15 min–2 hr |
What the live HTML actually says.
Live HTML pulled from goodguyroofing.com on 2026-06-09. Server: Apache · · unknown. Below: what we observed in the rendered DOM.
Stack detected
| Server | Apache |
| Backend | — |
| CMS | unknown |
| SSL valid | True |
| Sitemap | no real XML |
| robots.txt | 200 |
No H1 tag on the homepage
H1 is Google's strongest single on-page topical signal; the homepage emits none.
evidence: grep '<h1' on fetched HTML → 0 matches
No LocalBusiness schema
Detected JSON-LD: . No LocalBusiness / industry subtype, so reviews/NAP don't connect to the site.
evidence: JSON-LD @type scan of live HTML
Missing security headers
Security category scored 30/100. Missing: HSTS, Content-Security-Policy.
evidence: response header scan
Performance, measured.
Lighthouse mobile lab data, captured 2026-06-09. Google's Good zone: LCP <2.5s, FCP <1.8s, CLS <0.1, TBT <200ms.
Lighthouse performance 62/100, LCP 8.5 s
Lighthouse performance 62/100; LCP 8.5 s on mobile. Mobile Lighthouse performance 62/100.
What Google can read about you.
Detected JSON-LD types on the homepage: none.
No LocalBusiness schema linking the site to your Google Business Profile.
Are you findable by ChatGPT, Perplexity, Google AI Overviews?
As of 2026, 22% of all search queries route through an AI surface. Visibility there is now a measurable revenue lever.
robots.txt: AI crawler access
AI crawlers are explicitly addressed in robots.txt.
llms.txt: citation hygiene file
llms.txt present.
How your business appears in local search.
Google Business Profile: 5.0★ / 64 (Google Business Profile (DataForSEO, verified)).
No LocalBusiness schema linking the site to your Google Business Profile. Verified Google rating 5.0★ / 64 across 64 reviews (DataForSEO). No on-site LocalBusiness schema links these reviews to the site via sameAs/aggregateRating.
The order to do this work in.
Ranked by impact divided by effort. Estimates assume a competent WordPress developer.
| # | Action | Effort | Impact |
|---|---|---|---|
| 1 | Add a Strict-Transport-Security (HSTS) header | 15 min–2 hr | High |
| 2 | Add a Content-Security-Policy with script-src restrictions | 15 min–2 hr | High |
| 3 | Add a single descriptive H1 to the homepage | 15 min–2 hr | High |
| 4 | Add LocalBusiness schema (sameAs + aggregateRating linking your reviews) | 15 min–2 hr | High |